VulnCheck found that Xoscar, the actor framework under the Xinference model-serving stack, passes every actor-pool TCP message to cloudpickle.loads() before checking it, so anyone who can reach an actor port runs code as the pool process, often root on GPU nodes (CVSS 9.8, all versions through 0.11.2). Xinference 4.0.1 (Oct 16) requires Xoscar 0.12.0, which adds HMAC message authentication, but it's disabled unless a nonempty XOSCAR_AUTH_KEY is set on every supervisor, worker and client, with a coordinated restart. HTTP API auth doesn't protect actor ports.